Oscar Marion (Notes only)

Upgrade all Homebrew casks with --greedy

Oscar Marion — Mon, 19 Oct 2026 00:00:00 GMT

brew upgrade skips casks that update themselves, like VS Code, Zed or Raycast. Add --greedy to make Homebrew upgrade them too.

These casks are set to auto_updates true, and Homebrew leaves them to the app’s own updater (Homebrew FAQ).

To see which casks --greedy adds:

brew outdated --cask --greedy

Then upgrade them. The flag also picks up casks with version :latest:

brew upgrade --cask --greedy

To make it the default, add this to ~/.zshrc:

export HOMEBREW_UPGRADE_GREEDY=1

--greedy compares the cask with Homebrew’s install record, not with the installed app. If an app already updated itself, Homebrew reinstalls the cask’s version anyway.

Tailscale HTTPS certificates on TrueNAS

Oscar Marion — Sun, 11 Oct 2026 00:00:00 GMT

I have been using Tailscale in my homelab for over two years at this point, and I use their MagicDNS feature to access my TrueNAS server on the go: https://truenas.tail123456.ts.net.

After adding TrueNAS to a tailnet (official guide), the browser flags its web UI as not secure, since TrueNAS has no certificate for its ts.net name. Let’s fix that.

In reality, the certificate warning matters less on a tailnet, since WireGuard encrypts the traffic between your devices. So in my case, this is more of a “cosmetic” endeavor.

Requirements

MagicDNS and HTTPS Certificates enabled in the Tailscale admin console: Network → DNS.
The TrueNAS Tailscale app is installed and connected.

Get the certificate and key

You can run the commands below from the Tailscale container shell. From the TrueNAS shell, prefix each command with docker exec ix-tailscale-tailscale-1 (run docker ps if you’re unsure of the container name).

1. Get the certificate

Tailscale asks Let’s Encrypt for a certificate for the NAS’s tailnet name. Use the exact name shown on the Machines page of the admin console.

You get four PEM blocks: your certificate, then Let’s Encrypt’s chain of trust. Copy all four.

tailscale cert --cert-file - <host>.<tailnet>.ts.net

2. Get the private key

This prints the private key that matches the certificate. Paste it into TrueNAS, nowhere else.

tailscale cert --key-file - <host>.<tailnet>.ts.net

Import the certificate

In TrueNAS: Credentials → Certificates → Import

Name: anything, but include today’s date so you can tell certificates apart at the next renewal
Add to Trusted Store: off. The trusted store holds the certificates TrueNAS trusts when it connects to other servers. Your own certificate doesn’t belong there.
Certificate: all four PEM blocks from step 1, in order
Private Key: the private key from step 2
Passphrase: leave empty

Then select Import.

Apply it to the TrueNAS GUI

System → General Settings → GUI → Settings → GUI SSL Certificate. Save and wait for the web service to restart.

Cleanup

You can now go back to Credentials → Certificates and delete any expired Tailscale certificates.

You now have a valid HTTPS connection every time you connect to your TrueNAS GUI using the *.ts.net MagicDNS subdomain. Certificates have a 90-day expiry, so you’ll need to run these steps again. I will look into automating this process in the future, but for now that’s all I’ve got.

Bring back old Opus in Claude Code

Oscar Marion — Sat, 19 Sep 2026 00:00:00 GMT

I still use Opus 4.6 and 4.8 regularly, as I often find Opus 5 too verbose (and Fable too expensive). Here is how to add them back to the /model picker.

Add this to ~/.claude/settings.json. The rows appear after the built-in ones:

"modelPicker": {
  "options": [
    { "model": "claude-opus-4-8", "label": "Opus 4.8" },
    { "model": "claude-opus-4-6", "label": "Opus 4.6" },
  ]
}

Set modelPicker.replaceBuiltInOptions: true to show only these rows.

How to resize logical volume in Proxmox

Oscar Marion — Sun, 06 Oct 2024 00:00:00 GMT

Allocate more space on Proxmox

Go to your VM > Hardware tab
Select the disk you want to resize
Click on the Disk Action dropdown in the menu bar, then Resize
Resize the disk as much as you need:

Extend the partition in the VM

Make the partition see the space (/dev/sda3 in my case):
```
sudo cfdisk
```
Then, resize the partition within cfdisk.
Extend the Physical Volume (PV) from the partition:
```
sudo pvresize /dev/sda3
```
Extend the Logical Volume (LV) to use all the space in the Volume Group (VG):
```
sudo lvextend -l +100%FREE /dev/ubuntu-vg/ubuntu-lv
```
Resize the file system:
```
sudo resize2fs /dev/ubuntu-vg/ubuntu-lv
```
Check that the file system sees the new space:
```
df -h
```

Source: https://packetpushers.net/blog/ubuntu-extend-your-default-lvm-space

Manually trigger DDNS update on a UDM Pro

Oscar Marion — Sat, 19 Aug 2023 00:00:00 GMT

I ran into this issue today, and to my surprise, there is no way of doing that from the Unifi Dashboard. While most of the responses you will find on Ubiquiti’s forums and on Reddit suggest restarting the console altogether, u/TheFuer on Reddit posted a much better way to do it, using the CLI.

First, connect to your UDM Pro via SSH. You can follow this guide if you don’t have it setup yet.

1. Determine the config/command that the UDM is using by typing this command:

$ ps aux | grep inadyn

It should return something similar to this:

root        1432  0.0  0.0   6336  3256 ?        S    00:49   0:00 /usr/sbin/inadyn -n -s -C -f /run/ddns-eth8-inadyn.conf
root       24298  0.0  0.0   4924   680 pts/0    S+   01:00   0:00 grep --color inadyn

2. Run inadyn with a force flag to force the update. Replace The path with the one the previous command returned:

$ inadyn -n -1 --force -f /run/ddns-eth8-inadyn.conf

You should get the following once the update is successful:

inadyn[25647]: In-a-dyn version 2.9.1 -- Dynamic DNS update client.

inadyn[25647]: Update forced for alias all.dnsomatic.com, new IP# XXX.XXX.XXX.XXX

inadyn[25647]: Updating cache for all.dnsomatic.com

Blacklisting Google .mov and .zip TLDs

Oscar Marion — Tue, 23 May 2023 00:00:00 GMT

Google has made the .zip and .mov top-level domains available for public registration, and cybercriminals are already using them in phishing campaigns. It might be a good idea to block them all together for now: here are the steps for PiHole users.

Log into your PiHole admin interface
Click on the “ RegEx filter” tab
In the “Regular Expression” field, write ^.*.(zip|mov)$
Click on “Add to Blacklist”

You can make sure the filtering is working by accessing somethingfishy.zip or notamoviefile.mov. If everything is setup correctly, you should get an ERR_ADDRESS_INVALID from your browser.

You should also see the following on your PiHole query logs:

Zoom TKL shortcuts (Bluetooth and RGB)

Oscar Marion — Fri, 21 Apr 2023 00:00:00 GMT

Via customization web application: usevia.app

Zoom TKL JSON File can be found here.

Bluetooth

Action	Shortcut
Initiate bluetooth pairing (Device 1)	FN + Z (Hold)
Initiate bluetooth pairing (Device 2)	FN + X (Hold)
Initiate bluetooth pairing (Device 3)	FN + C (Hold)
Connect to bluetooth device {1, 2, 3}	FN + {Z, X, C}

General

Action	Shortcut
Restore to factory settings	FN + Space + Backspace
Reset keyboard	FN + Shift + R
Wired mode	FN + Space
Enter deep sleep mode	FN + Tab (Hold)

Function keys

Action	Shortcut
Increase brightness	FN + F1
Decrease brightness	FN + F2
Enter Mission Control	FN + F3
Open home folder	FN + F4
Refresh	FN + F5
Previous track	FN + F7
Play / pause song	FN + F8
Next track	FN + F9
Mute	FN + F10
Volume up	FN + F11
Volume down	FN + F12

RGB

Action	Shortcut
Increase RGB brightness	FN + ↑
Decrease RGB brightness	FN + ↓
Increase RGB speed	FN + →
Decrease RGB speed	FN + ←
Toggle RGB	FN + \
Increase RGB hue	FN + P
Decrease RGB hue	FN + ;
Increase RGB saturation	FN + [
Decrease RGB saturation	FN + ’
Change RGB mode	FN + ]